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CLAIMS 

1. An apparatus for ascertaining the status of a data processing environment, 
comprising at least one trusted computing device which is arranged to challenge other 

5 devices within a data processing environment, to keep a record of the response and to make 
the record available. 

2. An apparatus as claimed in claim 1, in which the trusted computing device is 
arranged to make periodic challenges to the other devices in order to maintain the accuracy 
of the record. 

10 3. An apparatus as claimed in claim 1 , in which the record indicates the historical 
status of the data processing environment. 

4. An apparatus as claimed in claim 1, in which the at least one trusted computing 
device is arranged to listen to communications within the data processing environment so 
as to identify the presence of new devices. 

15 5. An apparatus as claimed in claim 1, in which the record includes data identifying 
the type of devices in the data processing environment. 

6. An apparatus as claimed in claim 1, in which the trusted computing device is 
arranged to analyse the responses it receives in order to determine if a given device in the 
data processing environment is trustworthy. 

20 7. An apparatus as claimed in claim 6, in which the record indicates whether a device 
has been judged as trustworthy by the trusted computing device. 

8. An apparatus as claimed in claim 1, in which the at least one trusted computing 
device acts as a gateway to the data processing environment. 

9. An apparatus as claimed in claim 1, in which the at least one trusted computing 
25 device is a server. 

10. An apparatus as claimed in claim 1 in which the at least one trusted computing 
device transmits a challenge which includes a generation identifier which enables devices 
receiving the challenge to identify whether the challenge is valid. 
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11. An apparatus as claimed in claim 1, wherein the at least one trusted device is 
arranged to act as a proxy gateway to facilitate the exchange of data between devices in the 
data processing environment. 

12. A computing device including a communication device and a data processor, 
5 wherein the data processor is arranged to establish communication with a trusted 

computing device via the communication device, to receive at least part of the record of 
responses and to establish from an internal rules base whether the data processing 
environment is trustworthy enough to enable a class of transaction or task to be carried out 
in that environment. 

10 13. A computing device including a communication device and a data processor, 
wherein the computing device uses the communication device to establish communication 
with at least one device within a data processing system, and in which the data processor is 
arranged to identify challenges from at least one trusted computing device, to apply 
response rules to the challenge and, if a response indicated, to respond to the challenge in 

1 5 accordance with the rules. 

14. A computing device as claimed in claim 13, in which the computing device is 
arranged to search for a generation identifier within the challenge, to apply response rules 
to the generation identifier to see if the challenge is still valid, and if it is not to disregard 
the challenge. 

20 15. A computing device as claimed in claim 14, in which the computing device 
retransmits the challenge with a modified generation identifier if the challenge is valid. 

16. A method of ascertaining the status of a data processing environment, comprising 
the following steps: a trusted computing device challenges other devices within a data 
processing environment, keeps a record of responses made to the challenges and makes the 

25 record available. 

17. A method as claimed in claim 16, in which the trusted computing continues to 
challenge the devices in the data processing environment so as to maintain an evolving 
record of the status of the data processing environment. 
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18. A method as claimed in claim 16, in which the record includes a historical status of 
the data processing environment. 

19. A method as claimed in claim 16, in which the at least one trusted computing 
device listens to communications within the data processing environment so as to identify 

5 the presence of new devices. 

20. A method as claimed in claim 16, in which the challenge generated by the trusted 
device includes a generation identifier such that any device receiving the challenge can 
examine the generation identifier in order to establish whether the challenge is directly 
received from the trusted computing device or whether it has been retransmitted. 

10 21. A method of conducting a transaction in a data processing environment comprising 
a user device and at least a trusted computing device each having respective 
communication capabilities wherein the trusted computing device keeps a record of 
computing devices that it has identified within the data processing environment, and 
whereby the user device establishes communication with the trusted computing device, the 

15 trusted computing device sends to the user device at least a portion of the record of 
computing devices within the data processing environment, and the user device analyses 
the record to establish what facilitates the user device may access. 

22. A method of conducting a transaction as claimed in claim 21, wherein the user 
device further analyses the record in accordance with a set of security rules to determine 

20 what level of trust can be placed on the integrity of the data processing environment. 

23. An apparatus for ascertaining the status of a data processing environment, 
comprising at least one trusted computing device which is arranged to make periodic 
challenges to other devices within a data processing environment, to analyse the responses 
it receives in order to determine if given devices in the data processing environment are 

25 trustworthy, to keep a record of the response and to make the record available to other 
devices in the data processing environment. 
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24. A method of ascertaining the status of a data processing environment, comprising 
the following steps: a trusted computing device makes multiple challenges to other devices 
within a data processing environment, keeps a record of responses made to the challenges, 
analyses the responses it receives in order to determine if given devices in the data 
5 processing environment are trustworthy and makes the record available to other devices in 
the data processing environment. 



